Skip to content

Transfer confirmation code is sent to the initiator, not the intended new owner #774

Description

@feyishola

Both the "initiated" and "completed" notifications in certificate-transfer.service.ts:104-109,216-221 are created for initiatorId/approverId, and the initiation notification embeds the secret confirmationCode. The new owner (toEmail) is never notified and never receives the code, so the intended flow (new owner confirms with the code) is impossible — effectively the initiator both starts and approves the transfer. Fix: send the confirmation-code notification/email to toEmail, and notify the recipient on completion.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Stellar WaveIssues in the Stellar wave programbackendbugSomething isn't working

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions